smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
Sebastian Tiedtke	3a2ba85126	Flip default for certificate restriction to namespace to false (#60 )	5 years ago
Justin	351c01cf7e	Do not allow pods in one namespace to create certificates for hostnames from another namespace. (#54 ) * Do not allow pods in one namespace to create certificates for hostnames from another namespace. * Make cluster domain configurable, clean up shouldMutate() logic, and make namespace restrictions configurable with restrictCertificatesToNamespace. * Return certificate hostname validation errors in the admission webhook response. * Appease the gometalinter.	5 years ago
Mike Malone	042e36da65	autocert	5 years ago

Author

SHA1

Message

Date

Sebastian Tiedtke

3a2ba85126

Flip default for certificate restriction to namespace to false (#60 )

Justin

351c01cf7e

Do not allow pods in one namespace to create certificates for hostnames from another namespace. (#54 )

* Do not allow pods in one namespace to create certificates for hostnames from another namespace.

* Make cluster domain configurable, clean up shouldMutate() logic, and make namespace restrictions configurable with restrictCertificatesToNamespace.

* Return certificate hostname validation errors in the admission webhook response.

* Appease the gometalinter.

Mike Malone

042e36da65

autocert

3 Commits (5b84961f42cb64bd18428491c0b0fc90e0a58bdb)